HSA Adverse Event Reporting Timelines for Medical Devices in Singapore

1. Key takeaways

Singapore applies a three-tier clock for medical device adverse event (AE) reporting: a serious threat to public health must be reported within 48 hours; an event leading to death of a patient, user or other person, or to a serious deterioration in their state of health, must be reported within 10 calendar days; and an initial event that caused no death or serious injury but might lead to death or serious injury if it recurred must be reported within 30 calendar days. The reporting clock starts as soon as any personnel in your company, including sales representatives, become aware of the event, and a final report must be submitted within 30 days of the initial report.

• All companies dealing in medical devices — including importers, manufacturers, suppliers and registrants — carry the reporting obligation.
• The reporting clock is triggered by awareness anywhere in the company, not only within the regulatory affairs team.
• If more than one dealer is involved in a reportable adverse event, each one must submit its own report.
• Where there is uncertainty about reportability, HSA still expects a report within the stated timeframe.

2. Legal basis

The obligations summarised below are set out on the official HSA page on adverse event reporting of medical devices, under the Health Products Act 2007 (Part VIII) and the Health Products (Medical Devices) Regulations 2010. The key elements of the regime are as follows.

Three basic criteria for a reportable event (all must be met):

1. An adverse event (or a potential adverse event) has occurred.
2. The medical device is associated with that adverse event.
3. The event resulted in one of the four outcomes described above.

3. Expert insights

Five points from our review of the official requirements deserve close attention from manufacturers and dealers operating in Singapore.

Insight 1: a widely circulated figure for the death timeline is wrong. During our verification we noted that some industry databases state the timeline for death or serious injury as 15 calendar days. The official HSA page states 10 calendar days. Where sources conflict, we take the official HSA page as authoritative. The broader lesson: vigilance timelines are high-frequency reference data, and they must be verified against the official page rather than trusted to secondary compilations.

Insight 2: the clock starts from awareness by any personnel, and this is where timelines are most easily lost. The HSA wording explicitly includes sales representatives. When a sales representative hears about a problem at a customer site, the clock has already started. If only the regulatory department is authorised to escalate internally, and sales staff have no reporting awareness or channel, the statutory timeframe can be consumed before compliance even sees the case. When we build vigilance systems for clients, the first step is always to bring sales and after-sales teams into the reporting perimeter as vigilance outposts.

Insight 3: each-party reporting means there is no exemption by proxy. If the registrant reports and the importer does not, the importer is still in breach. This is especially dangerous in multi-entity structures where the registrant, importer and wholesaler are separate: each entity needs its own reporting owner and its own clock. Do not merge them into a single report and assume the obligation is discharged for all.

Insight 4: report on time even when in doubt. HSA states that if there is uncertainty about whether the AE is reportable, you should still submit a report within the stated timeframe, and that the initial report should not be delayed in order to gather more information. The operating principle we apply is simple: report first, supplement later. A preliminary report filed on time can always be enriched by a follow-up; a late report cannot be cured.

Insight 5: the initial report is followed by a 30-day final report obligation. The final report must describe the investigation of the event in detail. In addition, HSA may request further reports at any time. Set initial report date plus 30 days as a second calendar milestone. In practice many companies watch only the first deadline and miss the second.

4. Practical recommendations

Based on the official requirements above, we recommend the following practical measures for any dealer or registrant supplying medical devices in Singapore.

1. Appoint a separate vigilance owner for each Singapore entity: one each for the registrant, importer and wholesaler.
2. Include sales and after-sales staff in reporting training, making clear that awareness anywhere starts the clock.
3. Build three response tracks around the three-tier timelines, with an emergency channel for the 48-hour tier.
4. Run a dual calendar for initial and final reports, with the final report due within 30 days of the initial report.
5. Report when uncertain: file first and supplement afterwards; do not gamble on reportability.

Regulatory information verified as of: 26 October 2026

Source level: Tier 2 (official HSA adverse event reporting page), Tier 1 (Health Products Act 2007, Part VIII)

5. Verification checklist

• □ Response processes are established around the three-tier timelines (48 hours / 10 days / 30 days)
• □ Every Singapore entity has an independently designated vigilance owner
• □ Sales and after-sales personnel have completed awareness-starts-the-clock training
• □ A dual calendar for initial and final reports is in place
• □ The report-when-in-doubt principle is written into the SOP
• □ The Mandatory Medical Device Adverse Event Reporting Form is prepared and available

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across Southeast Asia, including Singapore. Our team prepares dossiers to ASEAN CSDT structure, manages submissions and deficiency responses with HSA, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com